Recent Posts by Brian Eidelman

I just wanted to let everyone know that Kiran and I will be presenting with our good friend John Griffith from Regions Bank at Oracle Open World next week. Our session is Oracle Identity Management Production Readiness: Handling the Last Mile in Your Deployment [CON6972] It will take place on Wednesday, Sep 21, 1:30 p.m. - 2:15 p.m.  at  Moscone West - 2020. In this session we will be discussing tips and techniques for a successful deployment of Oracle Identity Management. Learn...

Introduction I frequently get asked how to setup a single OAM deployment to protect both intranet and extranet apps. Today I’d like to explore the issues and solutions around such a setup. This post is part of a larger series on Oracle Access Manager 11g called Oracle Access Manager Academy. An index to the entire series with links to each of the separate posts is available. The Requirement So the specific request is how to set up OAM so that it can protect intranet applications...

Introduction As many of you know, last year we created indexes of posts on OAM and OIM 11g R2 that we call OAM 11g Academy and OIM 11g Academy. These indexes contain the articles we’ve written that we believe provide long lasting guidance on OAM and OIM.  Posts covered in these series include articles on key aspects of OAM and OIM 11g, best practice architectural guidance, integrations, and customizations. Main Article It is our hope that these series will prove valuable to new...

Introduction Today I’d like to discuss a very important topic which is patch management in an Oracle IDM/IAM deployment.  Patching seems like a pretty basic topic.  It is often taken for granted.  However, experience has shown me that patching is a frequent source of confusion for many enterprise software customers including those deploying the Oracle Identity Management  stack. So, I thought I’d address some common questions / topics related to patching so that people have a...

Introduction In my last post  I wrote about the complicated and timely process of determining all of a user’s group memberships when an LDAP namespace includes nested and dynamic group memberships. I wrote about how you can simplify and speed up getting a user’s group memberships through the use of a dynamic “member of” attribute and specifically the orclMemberOf attribute in OID. Today I’d like to extend this discussion to WebLogic server authentications. A Review of LDAP...

Introduction If you utilize nested and dynamic groups (and especially nested dynamic groups), then it can take a lot of effort and time to calculate all of a user’s group memberships in an LDAP directory. Main Article First you have to search for the user and find the user’s DN. Then you have to search all your groups to figure out which groups your user is directly a member of. Then for each of those groups you have to search all your groups again to see which of those groups...

Introduction One of the more popular posts on our blog was a post I made a while back about how to configure OAM 11g to use an externally hosted custom login page and how to write such a login page. When I originally wrote that post I included only snippets from a JSP page that represents an external OAM login form. Main Article I have updated that post with a full sample login.jsp that functions as an external login form for OAM 11g.  The code is also included below. To review,...

Introduction This is another post in our OAM 11g Academy series. To view the first post in the series which will be updated throughout to contain links to the entire series, click here: Oracle Access Manager Academy from the Fusion Security Blog A couple months ago Chris wrote a good post about the best way to deploy OAM from a web server / network architecture point of view. Today, I’d like to touch on a very important but overlooked aspect of OAM deployments which is whether...

Introduction Over a year ago I wrote a couple important posts about the domain architectures used in Oracle Identity Management deployments.  You can find these posts here and here. These posts have been very popular.  I’ve received lots of positive feedback on them but also a fair number of questions.  So, I thought that it would be worth revisiting the topic now. Main Article  Let’s Review My First Post So, the central premise of my first post was that it is a good idea to...